AbuseIPDB » 185.152.39.28

185.152.39.28 was found in our database!

This IP was reported 103 times. Confidence of Abuse is 33%: ?

33%

ISP	HostRoyale Technologies Pvt Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS203020
Domain Name	hostroyale.com
Country	United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 185.152.39.28

Whois 185.152.39.28

IP Abuse Reports for 185.152.39.28:

This IP address has been reported a total of 103 times from 29 distinct sources. 185.152.39.28 was first reported on September 15th 2023, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Buster	2025-03-17 21:51:00 (5 days ago)	Continual pointless script kiddie DDOS attack attempts on multiple sites from Perm Blocked ASN and c ... show moreContinual pointless script kiddie DDOS attack attempts on multiple sites from Perm Blocked ASN and country: show less	DDoS Attack Open Proxy Hacking Web App Attack
MAGIC	2025-03-15 20:15:44 (1 week ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-03-07 01:47:47 (2 weeks ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2025-03-04 21:59:33 (2 weeks ago)	Malicious activity detected	Hacking Web App Attack
TPI-Abuse	2025-03-04 17:57:21 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 185.152.39.28 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210730) triggered by 185.152.39.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 04 12:57:14.964377 2025] [security2:error] [pid 49408:tid 49408] [client 185.152.39.28:48184] [client 185.152.39.28] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gamepart.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gamepart.com"] [uri "/home/tancedi1/gamepart.com"] [unique_id "Z8c--nsACY2dDhYNZf1_UgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
MAGIC	2025-02-28 14:03:08 (3 weeks ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-02-18 01:48:49 (1 month ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2025-02-11 23:45:51 (1 month ago)	Malicious activity detected	Hacking Web App Attack
JuicyJ	2025-02-10 13:46:55 (1 month ago)	Excessive crawling/scraping	Web App Attack
octageeks.com	2025-02-07 05:06:56 (1 month ago)	Wordpress malicious attack:[octa404]	Web App Attack
Anonymous	2025-02-06 16:58:30 (1 month ago)	Malicious activity detected	Hacking Web App Attack
octageeks.com	2025-02-04 05:07:40 (1 month ago)	Wordpress malicious attack:[octa404]	Web App Attack
Anonymous	2025-01-24 02:06:29 (1 month ago)	Illegal actions on webapp	Hacking Web App Attack
Anonymous	2025-01-22 02:26:11 (2 months ago)	Probing to gain illegal access	Web App Attack
EinfxchFinn	2025-01-20 11:52:36 (2 months ago)	Unauthorized connection attempt to port 443 from 185.152.39.28	Port Scan